Skip to content
OpenAdvisories

Archive

21 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /21 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.0
    CVE-2023-4504 Public exploit

    OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

    Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in Septembe…

    OpenPrinting cups libppd cups Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2023-41993 Exploited Public exploit EPSS 24%

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

    Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
    KEV Sep 25, 2023
  • High 7.8
    CVE-2023-41992 Exploited Public exploit EPSS 12%

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 25, 2023
  • High 7.5
    CVE-2023-31716 Public exploit

    FUXA vulnerable to Local File Inclusion

    FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log

    @frangoteam/fuxa npm
  • High 7.5
    CVE-2023-31718 Public exploit

    FUXA local file inclusion vulnerability

    FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.

    fuxa-server npm
  • High 7.5
    CVE-2023-31717 Public exploit

    FUXA SQL Injection vulnerability

    A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.

    fuxa-server npm